Is there a configurable option that will automatically treat web pages that ask for password information the same as web pages thatask for credit card info. Call them using HTTPS:// and encrypt the data using SSL.

There is no automated way to do this. Xssl only accepts one url, and this is just the secure URL to be used for the pages that are protected by default.

You can force https to kick in for the pages you want by a simple mod to the asp code. For example, I wanted ssl to turn on one page earlier than default during the checkout process, so that the customer's address info was protected. This link discusses how to do it:http://www.vpasp.com/virtprog/vpaspforum/topic.asp?TOPIC_ID=2636